REGTESTS: http-rules: verify that we block '#' by default for normalize-uri
Since we now block fragments by default, let's add an extra test there to confirm that it's blocked even when stripping it.
This commit is contained in:
parent
2e97857a84
commit
4d0175b54b
@ -151,6 +151,11 @@ haproxy h1 -conf {
|
|||||||
|
|
||||||
default_backend be
|
default_backend be
|
||||||
|
|
||||||
|
frontend fe_fragment_block
|
||||||
|
bind "fd@${fe_fragment_block}"
|
||||||
|
http-request normalize-uri fragment-strip
|
||||||
|
default_backend be
|
||||||
|
|
||||||
backend be
|
backend be
|
||||||
server s1 ${s1_addr}:${s1_port}
|
server s1 ${s1_addr}:${s1_port}
|
||||||
|
|
||||||
@ -536,3 +541,9 @@ client c10 -connect ${h1_fe_fragment_encode_sock} {
|
|||||||
expect resp.http.before == "*"
|
expect resp.http.before == "*"
|
||||||
expect resp.http.after == "*"
|
expect resp.http.after == "*"
|
||||||
} -run
|
} -run
|
||||||
|
|
||||||
|
client c11 -connect ${h1_fe_fragment_block_sock} {
|
||||||
|
txreq -url "/#foo"
|
||||||
|
rxresp
|
||||||
|
expect resp.status == 400
|
||||||
|
} -run
|
||||||
|
Loading…
Reference in New Issue
Block a user